CVE-2026-19027

The H5Znbitdecompressonebyte, H5Znbitdecompressonenooptype, and H5Znbitdecompressoneatomic functions in H5Znbit.c in HDF5 prior to 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap...

PT-2026-68790

Name of the Vulnerable Software and Affected Versions TimescaleDB versions prior to 2.29.1 Description An out-of-bounds read exists in the Dictionary compression reverse row iterator within the tsl/src/compression/algorithms/dictionary.c file. While the forward path validates the decoded index, t...

PT-2026-68968

Summary re2 infers a character's byte length from its UTF-8 lead byte alone, with no bound on the bytes actually remaining in the input. Buffer arguments reach the native layer verbatim — only strings are re-encoded into well-formed UTF-8 — so a Buffer whose last byte is a multi-byte lead promise...

PT-2026-68758

Name of the Vulnerable Software and Affected Versions Contiki-NG affected versions not specified Description The DNS/mDNS resolver contains an issue where the skip name function in os/services/resolv/resolv.c processes DNS wire-format name labels without performing packet-boundary checks. The...

PT-2026-68787

Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.5 through 8.x Description An uninitialized heap memory disclosure exists in the native TIFF decoder within libavcodec/tiff.c. An attacker can exploit this by providing a crafted TIFF file containing a valid Deflate-compressed...

EulerOS 2.0 SP15 : xorg-x11-server (EulerOS-SA-2026-2915)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map...

PT-2026-68815

Name of the Vulnerable Software and Affected Versions node-re2 versions prior to 1.26.1 Description An out-of-bounds read exists when passing a Buffer whose final bytes form a truncated multi-byte UTF-8 sequence. The native binding fails to validate the remaining buffer size when decoding the fin...

EulerOS 2.0 SP15 : xorg-x11-server (EulerOS-SA-2026-2956)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map...

TencentOS Server 3: python-pillow (TSSA-2026:0813)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0813 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2026-70629: Use of Uninitialized Resource

FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder libavcodec/rscc.c that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes...

CVE-2026-5856: Out-of-bounds Read

Contiki-NG's DNS/mDNS resolver skipname in os/services/resolv/resolv.c walks DNS wire-format name labels with no packet-boundary check, and the caller in newdata invokes it in a loop iterating nquestions times from the attacker-controlled DNS header before validating the transaction ID. An attack...

CVE-2026-70634: Improper Validation of Array Index

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

CVE-2026-70631: Use of Uninitialized Resource

FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates...

PT-2026-68691

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description An uninitialized use in the GPU component allows a remote attacker who has already compromised the renderer process to retrieve potentially sensitive information from proces...

CVE-2026-71498: Out-of-bounds Read

node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Buffer whose final bytes form a truncated incomplete multi-byte UTF-8 sequence could cause the native binding to read past the end of the allocated buffer while attempting to decode the final,...

CVE-2026-19027

The H5Znbitdecompressonebyte, H5Znbitdecompressonenooptype, and H5Znbitdecompressoneatomic functions in H5Znbit.c in HDF5 through 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap...

Out-of-bounds Read

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in the paint event image generation process when offscreen rendering is enabled. An...

Out-of-bounds Read

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in the paint event image generation process when offscreen rendering is enabled. An attacker can cause...

GHSA-PFMC-3MGC-P6FP Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size

Impact In offscreen rendering mode, frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could cause the main process to read out-of-bounds memory while producing paint event images, disclosing memory or crashing the app. Apps are only...

EUVD-2026-53420

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could...